Privacy Policy

Bastaa AI ("Bastaa") respects the privacy of practice owners, staff, and patients. This policy describes what data we collect, how we use it, and the choices you have.

We collect lead information (name, email, phone, practice details) submitted through forms, and operational data processed through the platform (call logs, appointment data, billing data) as directed by our clients.

We use information to provide and improve the autonomous operating layer, send demo confirmations and ROI reports, communicate with clients, and ensure security and compliance.

PHI is handled under HIPAA-aligned controls and Business Associate Agreements. We do not sell PHI. Data is encrypted in transit and at rest using AES-256.

We share data only with subprocessors necessary to deliver services (e.g., PMS providers per client direction), under contract and consistent with this policy. We do not sell personal data.

You may request access to, correction of, or deletion of your personal data. Contact info@bastaa.ai with requests.

Privacy questions? Contact info@bastaa.ai.